Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows context-dependent attackers to create files in unexpected locations or with unexpected names via a NUL byte in a file path.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ruby 本地文件创建漏洞
Vulnerability Description
Ruby是日本软件开发者松本行弘所研发的一种跨平台、面向对象的动态类型编程语言。 Ruby 1.9.3补丁等级286之前的版本以及Ruby 2.0.0 r37163之前的版本中的file.c中的rb_get_path_check函数中存在漏洞。通过文件路径中的NUL字节，基于上下文的攻击者可利用该漏洞在不可预知的位置以不可预知的名字创建文件。
CVSS Information
N/A
Vulnerability Type
N/A